| CVE-2026-101019 |
Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes…
|
6.5
Medium
|
Oct 14, 2026 |
| CVE-2026-101025 |
Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when…
|
5.3
Medium
|
Oct 14, 2026 |
| CVE-2026-78222 |
A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch() can crash an NGINX…
|
7.5
High
|
Sep 2, 2026 |
| CVE-2026-78689 |
Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable…
|
8.1
High
|
Sep 2, 2026 |
| CVE-2026-18329 |
Description NGINX JavaScript (njs) and QuickJS (qjs) engines have a vulnerability when a js_access handler performs…
|
8.2
High
|
Sep 2, 2026 |
| CVE-2026-8711 |
NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled…
|
8.1
High
|
May 19, 2026 |